component-analysis topic

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

DependencyTrack

Integrates Dependency-Check reports into SonarQube

dependency-check

Jenkins plugin for OWASP Dependency-Check. Inspects project components for known vulnerabilities (e.g. CVEs).

jenkinsci

A curated list of Software Component Analysis (SCA) books, courses - free and paid, videos, tools, and tutorials.

hysnsec

Maven plugin that integrates with a Dependency Track server to submit dependency manifests and optionally fail execution when vulnerable dependencies are found.

pmckeown

OWASP Dependency Track API client for intergration into CI/CD pipeline

ozontech

Open Source Vue.js Component Analyzer - Save time communicating and effort in development to create better and more efficient code

logicspark

Main repository for the official Dependency-Track Jenkins plugin

jenkinsci

Creates CycloneDX Software Bill-of-Materials (SBOM) from Go projects. So you can use it with DependencyTrack to monitor security issues in 3rd party modules.

ozonru